Cyber Security and Risk Analyst / Cyber Security Engineer

• Co-ordinate with outsourced Security Operations Centre (SOC) to triage, investigate and respond to security alerts & incidents
• Manage vulnerability scanning, classify findings, enforce remediation SLAs and communicate threat updates
• Administer Cloud Security Posture Management across multi-cloud accounts; monitor compliance and drive remediation
• Operate Privileged Access Management, including user lifecycle, session recording and access reviews
• Support incident response, including containment, evidence preservation, root-cause analysis and post-incident reporting
• Propose and implement security enhancements, including device hardening, firewall controls, SIEM detection rules and automation scripts
• Conduct regular cyber-attack simulations and internal security assessments
• Facilitate audit exercises; maintain policies and compliance documentation (ISO 27001, NIST CSF)
• Review and maintain cyber security policies, standards & procedures in compliance with information security and risk management guidelines
• Leverage AI tools & automation to improve security investigation, detection engineering and operational efficiency

• Degree in Computer Science, IT, Cyber Security or related disciplines
• Minimum 3 years’ solid experience in cyber security operations or SOC
• Hands-on with SIEM (Splunk, Wazuh, Palo Alto XSIAM), EDR / XDR (Cortex XDR preferred) and vulnerability scanners
• Scripting ability in Python, PowerShell, and / or Bash for automation and analysis
• Knowledge of Windows / Linux administration, networking, firewalls (Palo Alto / Fortinet) and enterprise infrastructure
• Experience with cloud security (AWS / Azure), CSPM tools or PAM solutions is a strong advantage
• Familiar with MITRE ATT&CK, ISO 27001, OWASP Top 10 and CIS Controls
• Possess relevant security qualifications such as CEH, CHFI, ITIL, CCSA, CISSP and CISA is an advantage
• Experience with AI-assisted security operations (LLM, SOAR automation, AI-agent workflows) and understanding of AI security governance is a plus
• Good command of both written and spoken English and Chinese including Putonghua
• Self-motivated team player with strong analytical and problem-solving skills
• Candidates with less experience will be considered for the post of Cyber Security Engineer

We offer attractive remuneration packages and fringe benefits to the right candidates.

Please send your resume with expected salary to us via:

• Email: recruitment@hld.com (Attached resume should be in MS Word or Plain Text format), OR
• By Post: Human Resources Department, Henderson Land Development Company Limited, 71/F, Two International Finance Centre, 8 Finance Street, Central, Hong Kong. (Please quote reference code on the envelope)